In the Claims : 

Please add the following new claims: 

21. (New) A communications security system to prevent transfer of selected 
commxmication transactions from an imtrustworthy network to a trustworthy 
network, comprising: 

a server, connected to the untrustworthy network, that maintains a plurality 
of protection rules, each of which, when applied to a communication 
transaction, identifies that communication transaction to be a respective 
one of the selected commimication transactions; and 

a portal, connected between the imtrustworthy network and the trusted 
network, that: 

cooperates with the server to transfer the database of protection rules 
from said server to the portal via said untrustworthy network; 

receives a communication transaction from the untrustworthy network 
for transfer to the trustworthy network; 

applies each of the protection rules to the received communication 
transaction; and 

selectively transfers to the server at least a portion of the received 
communication transaction via the untrustworthy network if a 
protection rule identifies the received commimication transaction to 
be a respective one of the selected communication transactions. 

22. (New) A portal for use in a communications security system to selectively 
transfer a communication transaction in accordance with a protection rule 
maintained by a server, the portal: 

transferring the protection rule from said server; 

receiving the communication transaction; 

applying the protection rule to the received communication transaction; 

preventing the transfer of the received communication transaction if 
required by the protection rule; and 
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selectively transferring to the server at least a portion of the received 
communication transaction even if the protection rule allov^s 
transfer of the received communication transaction. 

23. (New) A communications security method v^herein a portal selectively 
transfers a communication transaction in accordance v^ith a first protection rule 
maintained by a server, comprising: 

transferring the first protection rule from said server to the portal; 

receiving at the portal the communication transaction; 

applying at the portal the first protection rule to the commtmication 
transaction; 

preventing at the portal the transfer of the communication transaction if 
required by the first protection rule; 

selectively transferring from the portal to the server at least a portion of 
the communication transaction even if the first protection rule allows 
transfer of the communication transaction; and 

selectively creating at the server a second protection rule in response to 
said portion of the communication transaction. 



